15b67ab5ea5866fa9e0f2206325c6138e090b2898075299d28e1ad7975f76182 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

702365b87da2db97503f5ed7bbe23126_JaffaCakes118
Size

715KB
Sample

240524-3dvplseg51
MD5

702365b87da2db97503f5ed7bbe23126
SHA1

505075ff478ce29e2fecb88c7cd1305d95561da3
SHA256

15b67ab5ea5866fa9e0f2206325c6138e090b2898075299d28e1ad7975f76182
SHA512

ace9d9ca893873b41e159b76c7af10b91666f364c642c7fa532b8560af053f77c98b525b76580429c9f36cf1cdafb938a3d0759146b6521c1111b03db3e097b8
SSDEEP

12288:9ERzbPGFe8qv9J0o2vcsC0iZxQfQpW3JBJ/MLPH5QVFgBIPDrqgqw2cqkF74n:9uzbPGFXC9zD93sBMqYBMDvd2mx4n

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  702365b87da2db97503f5ed7bbe23126_JaffaCakes118
- Size
  
  715KB
- MD5
  
  702365b87da2db97503f5ed7bbe23126
- SHA1
  
  505075ff478ce29e2fecb88c7cd1305d95561da3
- SHA256
  
  15b67ab5ea5866fa9e0f2206325c6138e090b2898075299d28e1ad7975f76182
- SHA512
  
  ace9d9ca893873b41e159b76c7af10b91666f364c642c7fa532b8560af053f77c98b525b76580429c9f36cf1cdafb938a3d0759146b6521c1111b03db3e097b8
- SSDEEP
  
  12288:9ERzbPGFe8qv9J0o2vcsC0iZxQfQpW3JBJ/MLPH5QVFgBIPDrqgqw2cqkF74n:9uzbPGFXC9zD93sBMqYBMDvd2mx4n
Score

7^/10

spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2